CISA Adds CVE-2008-0015 to KEV Catalog Due to Active Exploitation

CISA has added the long-standing Microsoft Windows vulnerability CVE-2008-0015 to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation. This flaw, affecting the Windows Video ActiveX Control, allows for remote code execution (RCE) and poses a significant risk to users. The vulnerability was first disclosed in 2008 and has now been confirmed as actively exploited as of February 17, 2026.